SamWalker (Customer) asked a question.

From an Authentication Manager console when ssh'd in. How can you validate a port to a destination is open... like 636... In windows it would be telnet 10.10.10.10 636 or test-netconnection 10.10.10.10 -port 636.

  • @SamWalker (Customer)​,

     

    Try running netstat. For example,

    rsaadmin@primary:/opt/rsa/am> netstat -an | grep 636.

    unix 2 [ ACC ] STREAM LISTENING 13636 /run/systemd/private

  • The TCP Port for the Security Console is 7004, The Operations Console is 7072

  • jay.guillette (RSA SecurID)

    netstat will show you local ports on AM, e.g. 7004, 7072, 7002...

    to test a remote port from SSH in AM Linux you can use openssl.

     

      Openssl s_client -connect <IP_addr>:636

     

    If a firewall blocks your openssl request or the <IP_addr> server does not respond, you will get something like

    connect:errno=9

     

    But if you connect you will see all kinds of information including any Cert presented.

     

    openssl_bad_good

    Expand Post